/*
 * To change this template, choose Tools | Templates
 * and open the template in the editor.
 */
package jobportal.admin;

import java.io.IOException;
import java.io.PrintWriter;
import java.sql.Connection;
import java.sql.ResultSet;
import java.sql.Statement;
import javax.servlet.RequestDispatcher;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import jobportal.Dbconn;

/**
 *
 * @author vikash
 */
public class AdminLogin extends HttpServlet {

    /** 
     * Processes requests for both HTTP <code>GET</code> and <code>POST</code> methods.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    protected void processRequest(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        PrintWriter out = response.getWriter();
        try {
            HttpSession session = request.getSession();
            RequestDispatcher rd = request.getRequestDispatcher("admin.jsp");
            Connection con = Dbconn.getConn();
            Statement st = con.createStatement();
            ResultSet rs;
            String username, password, sql;
            username = request.getParameter("UserName");
            password = request.getParameter("Password");
            sql = "select userid,password,name from admin where userid='" + username + "'";

            out.println(username + password);

            rs = st.executeQuery(sql);
            if (rs.next()) {
                if (rs.getString("password").equals(password)) {
                    response.setHeader("Cache-Control", "no-cache");
                    response.setHeader("Cache-Control", "no-store");
                    response.setDateHeader("Expires", 0);
                    response.setHeader("Pragma", "no-cache");

                    request.getSession();
                    session.setAttribute("role", "admin");
                    session.setAttribute("username", rs.getString("userid"));
                    session.setAttribute("name", rs.getString("name"));
                    st.executeUpdate("update admin set lastlogin=now() where userid='" + username + "'");
                    response.sendRedirect("admin/home.jsp");
                } else {
                    session.invalidate();
                    request.setAttribute("msg", "<font color='red'>Invalid Username or Password</font>");
                    rd.forward(request, response);
                }
            } else {
                session.invalidate();
                request.setAttribute("msg", "<font color='red'>Invalid Username or Password</font>");
                rd.forward(request, response);
            }

        } catch (Exception e) {
            out.println("Exception:: " + e);
        }
    }

    // <editor-fold defaultstate="collapsed" desc="HttpServlet methods. Click on the + sign on the left to edit the code.">
    /** 
     * Handles the HTTP <code>GET</code> method.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    @Override
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        processRequest(request, response);
    }

    /** 
     * Handles the HTTP <code>POST</code> method.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    @Override
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        processRequest(request, response);
    }

    /** 
     * Returns a short description of the servlet.
     * @return a String containing servlet description
     */
    @Override
    public String getServletInfo() {
        return "Short description";
    }// </editor-fold>
}
